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We present a supervised secure entanglement sharing protocol via tripartite W states for faithful 
quantum teleportation. By guaranteeing a secure entanglement distribution in the charge of a third 
^ ' believed supervisor, quantum information of an unknown state of a 2-level particle can be faithfully 

teleported from the sender to the remote receiver via the Bell states distilled from the tripartite 
W states. We emphasize that reliable teleportation after our protocol between two communication 
parties depends on the agreement of the supervisor to cooperate via taking the W states as both the 
oo quantum channel and eavesdropping detector. The security against typical individual eavesdropping 

attacks is proved and its experimental feasibility is briefly illustrated. 
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PACS numbers: 03.67.Hk, 03.65.Ud 



Quantum teleportation (QT)[l[ turns out to be incredibly successful in a wide variety of quantum information 
science, it achieves a different way for quantum state transmission, where arbitrary unknown quantum state collapses 
on the sender side and reborns on the receiver side via one way local operation and classical communication(LOCC) 
O" 1 and previously shared pairs of maximal entanglement states. 

To experimentally implement the QT, however, practical obstacles will be encountered. One is the decoherence and 
CS, : the absorption happen in the imperfect quantum channel! , in which particles from entanglement pairs may get lost or 
' entangled with the environment thus the entanglement decreases exponentially with the extension of the distribution 
, distance. To address this, Zukowski et al. put forward the entanglement swapping to shorten the direct entanglement 
distribution 0], Bennett et al. introduced the entanglement distillation to refine the quality of entanglement effected by 
the decoherence after transmission Q. Based on these two contributions, quantum repeater(QK), which was proposed 
by Briegel et al., was constructed for long distance entanglement distribution in noisy and lossy quantum channel 
the invention of QR makes long distance entanglement distribution possible and because the maximal entanglement 
pairs can be distilled from the imperfect entanglement ones, the assumption that entanglement distributions happen 
in a noise free environment becomes reasonable for QT-based quantum communication protocol design. 

Another considerable obstacle is the security — the potential eavesdropping. Recently, various quantum communi- 
cation protocols have been proposed based on the QT, most of which, however, are constructed under the popular- 
hypothesis that the well known "third trustable party" (TTP) distributes the particles to the communication atten- 



dants without any interruption from the eavesdropper who may want to stole the sender's quantum information by 
recovering the qubits at her own hand, therefore, the protocol may not work well or even fail when the quantum 
channels are unauthenticated. 

To be more general, the QT requires a secure enough quantum channel — for the direct quantum transmission to 
achieve the previous sharing of the entanglements — yet available channels are typically with evil quantum scientist 
who owns unlimited computing power. Through such considerations, we propose a supervised secure entanglement 
sharing protocol, the "Wuhan" protocol, for QT, in which a third supervisor Charlie is included to take in charge of 
the entanglement distribution and eavesdropping detection with classical communication and sequence of tripartite 
W states [5|- Under the help of this protocol, quantum information of an unknown state of a 2-level particle can be 
faithfully teleported. 

The "Wuhan" protocol (see Fig. [IJ enables faithful QT between Alice and Bob only when the TTP Charlie agrees 
to provide them the needed Bell states. The interesting scenario perfectly suits the bridge building rule in the Wuhan 
city. If a new Yangtse River bridge was going to be built between Wuchang(WC) and Hanyang(HY), two of the three 
member towns of the Wuhan city, should be approved by the governing town Hankou(HK) after which HK sends 
hardhats to WC and HY using HK-WC and HK-HY bridges respectively. Back from the tale, in this protocol we 
ask a believed supervisor Charlie to help the two parties Alice and Bob for distilling the "hardhat" — the Bell state 
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which is nondeterministically "hidden" in the following tripartite W state 
|W) = -^(|100) + |010) + |001)) o6c 

H[_L(|io) + |oi)) o6 ]|o) c + -^|oo) 6|i) c (i) 

= ^(| + +) - | - -»„6|0)c + ^=(| + +) + | + -) + | - +} + | - -»„6|l)c, 

where |+) = ^(|0) + |1)) and |— ) = -^g(|0) — |1)). Note that when measuring either of the three qubits, say particle 
c, Bell state 

hA + ) = ^(|oi) + |io)), (2) 

made up of particles a and b can be obtained with a probability P(\ip + )) = |, then the two communication parties 
cooperate with Charlie to execute two fundamental progresses, the entanglement distribution(ED) and teleportation 
confirmation(TC) , in sequence. The ED helps to perform secure distribution of entanglement states to Alice and 
Bob; the TC, if Charlie permits, distills the "hidden" entanglement states for Alice and Bob by Charlie's local 
measurements. Here we give an explicit algorithm for "Wuhan" protocol, after which its security is discussed by 
examing several typical attacks. 




FIG. 1: The scenario of the "Wuhan" protocol. 

(ED. 0) Protocol is initialized, t = 0. Charlie announces the switch to transmission mode and prepares three-qubit 
W states in EQ. 1, forming the sequence w N = (w\,W2, Wi, w n ), where Wi — (a,i,bi,Ci) are the three qubits of 
the ith W state. Here we assume the quantum state that Alice wants to teleport is 

|V) ro = a|0)+6|l), (3) 

where |a| 2 + \b\ 2 = 1. 

(ED. 1) t = t + 1. Charlie reserves qubit c t from w t as home qubit, sending the other two particles a t and b t to 
Alice and Bob respectively as the travel qubits. Repeat step (ED.l) until t reaches n + 1. As result, Charlie obtains 
a home qubit sequence c N — (ci, c 2 , Cj, c n ), and the two communicators are expected to obtain travel sequences 
a N = (ai,a 2 , a it a n ) and b N = (h,b 2 , h, b n ) respectively. 

(ED. 2) Charlie announces the switch to detecting mode, initializing m = 1. Starting from his particle c m in c N , 
Charlie performs a nondeterministic single qubit measurement using basis B z — {(|0), |1))}, that is, the particle 
Cm owns a probability d to be measured and the whole W state collapses(also, 1 — d to be passed by without 
any operation), m = m + 1, repeat (ED. 2) until m = n + 1. Charlie takes down the locations of the particles 
measured, forming the location information sequence k v — (fci, k 2 , hi, k v ) and related result sequence Rc v = 
(Rci,Rc2, ...,Rci, ...,Rc v ) where ki is the location of the ith measured particle in c N satisfying max(k v ) < n, and 
Rci is the measurement result for the home qubit c^. Also, Charlie selects v local measurement basises, each of 
which is in the B x with probability p and B x with 1 — p, then he integrates the k v and the basises into the sequence 
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kb v — ((kx, bi), (&2, 62), —j {ki,bi), (k v ,b v )) where fc, S fc y and bi G {B X ,B Z }, he then sends the to the classical 
channel, keeping the sequence Rc v himself. 

(ED. 3) Following the kb v , Alice and Bob both perform local measurements on their own travel qubit sequences 
using the combined basis in kb v , giving two measurement result sequences Ra v = (Rax, Ra 2 , ■ Ra%, Ra v ) for 
Alice and Rb v = (Rbi, Rb2, Rbi, Rb v ) for Bob. Unlike Charlie's keeping on Rc v in Step (ED. 2), they send the 
two result sequences to the public classical channel. 

(ED. 4) On receiving the two result sequences, Charlie performs the following checking algorithm for all elements 
of the two sequences: 



(Alg. 0) If bi = B z , let C[0] and C[l] be the two checking flags for Ra v and Rb v respectively; 
(Alg. 1) C[0] = if Rai ®Rbi = for all Ra s which are |0) in Rc v , else C[0] = 1; 
(Alg. 2) C[l] = if Rai ®Rbi = l for all Ra s which are |1) in Rc^ , else C[l] = 1; 

(Alg. 3) (C[0]&&C[1]) = 0: Eve is detected, Charlie announces the abortion of this distribution and goes to step (ED. 0); 
(C[0]&&C[1]) = 1: proceeds (TC. 0); 
(Alg. 4) Else, let C[2] be the checking flag; 

(Alg. 5) C[2] = if Rat / Rbi for all Ra s which are jO) in Rc v , else C[2] = 1; 

(Alg. 6) C[2] = 0: Eve is detected, Charlie announces the abortion of this distribution and goes to step (ED. 0); C[2] = 1: 
proceeds (TC. 0). 



(TC. 0) Charlie ticks out all his measured home qubits, leaving the new home qubit sequence c' N ~ v = 
(c^,c 2 , ■■-,c' i , ...,c/ n _ v ) which are particles not selected in the detecting mode, if Charlie agrees with Alice and Bob's 
QT requirement, he performs local measurements on all the home qubits in c , obtaining result sequence 
Rc' N ~ v = (Rc'i, Rc' 2 , Rc'i, Rc' n _ v ). Note that after his measurements, the joint state of particles m, a and 
b may become one of the following states 



l^o) = \i>) m <8> c (o\w) abc 

= (a|0)+fe|l)) m ® |00) a6 
|<M = \lp) m O c(l\W) abc 



(4) 



= (o|0) + 6|l)) m ® -j= (|10) + |01)) a6) W 

Charlie runs a selection to produce another location information sequence k' s — (k[ , k' 2 , ■ k\, k' s ) satisfying 
max(k' s ) < (n — v) and Rc' k , in Rc' N ~ v is |0), then he publishes the sequence k' v . 

(TC. 1) According to k' v , Alice and Bob locate and extract their own particles from a N and b , taking particles 
dk'.ibk 1 . as a whole, maximal entanglement pairs in Bell state \4> + ) are successfully distilled and the required previous 
sharing is achieved, therefore further faithful QT between Alice and Bob can be pushed forward. 

We now consider the security of the protocol and first take account of the intercept attack. Suppose the direction 
of the final QT are from Alice to Bob, it is sure that if Eve proposes only naive interceptions without appending fake 
particles, she may soon be detected when the three parties do the particle number comparison, therefore one consid- 
erable approach for Eve is the intercept-resend attack (IRA, see Fig. [5]) which may include two different strategies, the 
intercept-measure-res end attack (IMRA) and the intercept- store-resend attack (ISRA), here we show the robustness 
of our protocol in case of these two IRA. 

In the IMRA, Eve intercepts the particle which is going to the Bob side from Charlie and performs immediate 
single qubit measurement, then she appends fake particle which is identical with the measurement result to Bob 
which establishes fake quantum channel between Eve and Bob. To be more specific, because the initial state is \W), 
the evaesdropping may turns out to be in state |0) with probability P(0) = |, she then sends a fake particle in state 
|0) to Bob, thus joint state for Alice, Bob and Charlie's system becomes 

|«;i>=i(|10> + |01» oc ®|0) 6 

f (6) 
— (|100) + |001)) afcc ; 

or she may obtain state |1) with probability P(|l)) = |, sending another particle in state |1) to Bob, leaving the 
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FIG. 2: Eavesdropping by the intercept-resend attack. 



collapsed fake state 

\w 2 ) =|00) ac ® |1) 6 
HOIOW 

In either case, we conclude that Eve can be detected with probability during the detecting mode of this protocol, 
however, we are going to ignore the calculations for these probabilities since the principals of the QT do not allow 
the collapsed but uncntangled states \w\) and \w2) being the appropriate sources between Eve and Alice to recover 
Alice's quantum states, in other words, the IMRA can not bring Eve any quantum information. 

Coming to the other IRA strategy, the ISRA, where Eve protects the intercepted particle by just storing without 
measurement to wait for a later impersonating teleportation. In order to hide her existence, Eve then sends a fake 
qubit from herself to Bob, different from the IMRA, Eve does not know the exact state of the particle, thus she can 
only send a particle in state \4>)b(e) — { x \fy + J/|l))&(e) in which x, y are random coefficients satisfying x 2 + y 2 = 1, 
then the joint state of the quad-party system turns to 

|T) =|0) 6 ® \W) aec 

=(x\0) + y\l)) b ® ^=(1100) + |010) + |001)) oec 

=_L(. x |1000)+y|0101)) aec6 (g) 
+_L( a; |0100)+y|1001)) aec6 
+ _L(. x |0010)+y|0011)) aec6 
For convenience, we ignore the intercepted particle e, and write the Eq. (8) into 

|T') = -J=(x|100)+y|010)) a6c 

+ _L( x |000)+y|110)) Qbc (9) 
+ _L( x |001)+y|011)) Qbc , 

according to the checking algorithm in (ED. 4): 

Case 1. If Charlie's measurement obtains state |1), combining the basis B z with probability p, Eve may be detected 
due to the introduced state \Rej\) = |011) O 6 C with probability 



(10) 
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Case 2. If Charlie obtains state |0) combining B z , Eve may be detected by the state \Rej2) = x\000) +y|110) with 
the probability 

P{d^) = \-p-d=^ (11) 

Case 3. If Charlie combines the basis B x , the eavesdropping attack succeeds no matter what Charlie's measurement 
results. 

Therefore, the probability of a successful ISRA eavesdropping for one particle is 

S(y,p,d,l) =1-P(d 1 )-P(d 2 ) 
pd pdy 2 

=1 -Y~— (12) 

_ pd(l + y 2 ) 
3 

and the rate for whole sequence w N is 

S{y,p,d,n) =S(y,p,d,l) n 

pd(l + y 2 ) (13) 
1 3 J ' 

For < y,p,d < 1, S(y,p,d,n) decreases exponentially but is always nonzero. In the limit n — •> 00, we have 
S(y,p,d,ri) — > 0, thus the protocol is quasi-secure. Here we give the curves for S(y,p,d,n) in Fig. [3] as examples for 
cases of different y,p, d selections. 





(c) 



FIG. 3: Successful eavesdropping rates, plotted for (a) specified probability d and p with different state coefficients y; (b) 
specified y and p with different d; (c) specified d and y with different p 



Another typical attack different from the IRA is the entangle-measure attack(EMA, see Fig. 2]), i.e. Eve may uses 
her own ancillar qubit which is in state |0) to entangle with the travel qubit b being sent to Bob by utilizing a CNOT 
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gate Ube (let Bob's particle be the controller and Eve's be the iargei)@, then the joint state of the four particles 
becomes 



UbelWabcOe 



^(liooo) 



|0101> + |0010)) abce-i 



(14) 



since the EMA never modifies the original state of the three-qubit W state, this kind of attack can not be sensed during 
the protocol, however, Eve can still be found during the final QT, the reason is that after Eve's CNOT operation, the 
extracted Bell state used for QT actually becomes \<f>') = -^=(|100) + |011)) a b e , with the state \ip) m , we have the joint 
state 

H) m W)abe =O|0) + b\l)) m <8> -^=(1100) + |011»«6e 



=-=(o|0100) + o|0011) + 6|1100) + 6|1011» ma6e 
v2 



(15) 



e he 



)be, 



where \ip 



±=(|01>±|10>),|<^> = ^(|00>±|11>) 



^2 



(a|00)±6|ll)) and = (o|ll)±6|00», Eve may recover 



the state that Alice teleports on the first particle of her ancillar qubit sequence, however if Eve continues to perform 
measurement for specifying the coefficients a and b, the entanglement state made up from particles b and e collapses, 
therefore Bob's measurement on his particle thus only gives deterministic result, which implies Eve's existence. 



Charlie 




Quantum Channel 
Classical Channel 



Alice 



Bob 



FIG. 4: The entangle-measure attack. 

The "Wuhan" protocol is experimentally feasible. The tripartite W states can be produced by the parametric 
down-conversion method^]; the storage of photons is necessary only for a duration corresponding to the distance 
of Charlie's distributions and the quantity of qubits that Alice wants to teleport and the entanglement sharing 
efficiency depends on Charlie's checking parameters d and p; the local measurements and the QT have been already 
experimentally implemented. Altogether, the realization of the "Wuhan" protocol should be reachable using current 
quantum information technology. 
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